Living off the Land and Fileless Malware

ReliaQuest reports that fileless malware and living-off-the-land techniques dominated critical incident detections in 2023—fileless attacks accounted for 86.2% of detections and common LOLBins (rundll32, msiexec, mshta) were heavily abused—highlighting threats such as SocGholish and references to sophisticated actors using these stealthy methods; the report includes a technical breakdown of observed commands and WMI queries, a remediation case study, and recommended detection and mitigation controls (EDR, script logging, application allowlisting, registry monitoring).